CVE-2014-6574

{"id": "CVE-2014-6574", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-01-21T15:28:13.463", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1031576", "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 6.1.0.3 allows remote attackers to affect integrity via unknown vectors related to Testing Protocol Library."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Agile for Process de Oracle Supply Chain Products Suite 6.1.0.3 permite a atacantes remotos afectar la integridad a trav\u00e9s de vectores desconocidos relacionados con Testing Protocol Library."}], "lastModified": "2016-06-24T15:54:59.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:supply_chain_products_suite:6.1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEEC2D5B-45EC-45E9-8F6A-61BA71ED8F33"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}